﻿using System.Runtime.InteropServices;
using Ast.Core.WinApi;

namespace Ast.Core.Services.ObjectDefinitions
{
    [StructLayout(LayoutKind.Sequential, CharSet = CharSet.Auto, Pack = 1)]
    public struct ObjectSymbolicLink
    {
        public long CreationTime;

        public Structure.UnicodeString LinkTarget;

        public uint DosDeviceDriveIndex;
    }

    /*
lkd> dt _OBJECT_SYMBOLIC_LINK -v
nt!_OBJECT_SYMBOLIC_LINK
struct _OBJECT_SYMBOLIC_LINK, 3 elements, 0x18 bytes
    +0x000 CreationTime     : union _LARGE_INTEGER, 4 elements, 0x8 bytes
    +0x008 LinkTarget       : struct _UNICODE_STRING, 3 elements, 0x8 bytes
    +0x010 DosDeviceDriveIndex : Uint4B
    */
}